Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/VfIfHSOH3SCeUfrhFn1L_hvFJbY.roa
File: VfIfHSOH3SCeUfrhFn1L_hvFJbY.roa (raw, json)
Hash identifier: CBZdmBcpW3D2s2ojYTVUu4c3VrFFohZiC/xV/LxLkmU=
Subject key identifier: 55:F2:1F:1D:23:87:DD:20:9E:51:FA:E1:16:7D:4B:FE:1B:C5:25:B6
Certificate issuer: /CN=f030658f16d2d88d34164592fcd4de13131f1695
Certificate serial: 0194221FA946A0CD369EF6A9FDCAD8451571
Authority key identifier: F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/VfIfHSOH3SCeUfrhFn1L_hvFJbY.roa
Signing time: Wed 01 Jan 2025 13:48:07 +0000
ROA not before: Wed 01 Jan 2025 13:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216246
IP address blocks: 45.15.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a9:46:a0:cd:36:9e:f6:a9:fd:ca:d8:45:15:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f030658f16d2d88d34164592fcd4de13131f1695
Validity
Not Before: Jan 1 13:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55f21f1d2387dd209e51fae1167d4bfe1bc525b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c0:91:2d:82:66:8b:e3:49:1b:f1:ab:15:96:
25:4a:0e:4b:8e:76:82:07:c5:45:ee:98:e4:43:1c:
3f:94:d1:22:9f:da:b2:9c:b2:33:34:f7:b1:eb:73:
23:ae:25:cd:ab:4b:ac:d8:cb:bc:32:fa:e4:ad:5b:
b8:78:46:ba:90:0f:7e:87:d2:98:f6:45:2c:10:3e:
88:69:84:88:9a:9c:3f:5b:77:b8:1f:9d:f9:79:4f:
3d:88:1d:3a:26:ac:89:39:9d:19:df:32:c0:f4:35:
59:73:62:0b:b9:eb:85:75:46:9f:77:02:6b:3f:17:
85:5d:4a:45:89:bc:08:34:d4:09:48:ca:21:47:49:
cc:fe:cd:5c:bb:ff:77:e0:74:b4:58:8e:b9:b2:9f:
66:48:dc:6a:c5:ac:5d:55:8c:80:1a:bf:fb:9d:05:
32:8e:aa:f4:a1:17:76:28:5f:c7:ba:a2:0a:e3:28:
dd:b5:1f:9a:d8:16:14:9b:0d:53:69:fc:09:4b:91:
2c:ec:af:a6:4c:9c:e3:81:39:0a:e1:b3:36:f6:4c:
d9:4d:0a:2f:3a:6d:9e:d4:51:8a:80:57:88:be:24:
1a:69:78:10:26:dd:7c:54:40:95:57:07:d0:22:65:
b2:4c:8a:b1:f0:db:f3:5c:d6:14:d0:e7:06:96:32:
c9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F2:1F:1D:23:87:DD:20:9E:51:FA:E1:16:7D:4B:FE:1B:C5:25:B6
X509v3 Authority Key Identifier:
keyid:F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/VfIfHSOH3SCeUfrhFn1L_hvFJbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.158.0/24
Signature Algorithm: sha256WithRSAEncryption
38:96:18:e9:ec:31:e0:62:1a:04:12:24:be:a0:8a:bc:77:84:
69:6a:d9:ac:88:d4:66:ab:99:6a:a8:5e:33:4f:48:66:b9:88:
96:4a:2f:91:73:ca:f7:7a:e4:5e:dc:cb:c9:e9:00:18:8d:27:
4a:6f:5c:e9:b1:6e:4f:f6:2b:fc:59:a9:f8:40:1c:45:f5:a5:
12:3c:1b:c0:34:cb:9d:24:92:16:24:58:7d:d9:40:8b:f2:f6:
80:79:32:f8:c3:e6:f2:8f:e3:f0:5f:a9:14:dc:61:6e:57:ec:
9d:ad:08:3b:a0:74:f0:e0:5c:e4:1c:a3:2b:6c:f3:db:99:9d:
31:33:da:fb:ee:d0:0b:01:f6:70:2e:82:32:d9:4f:6f:45:50:
ab:f6:c2:bc:30:a7:e3:71:31:6b:5b:a1:b9:cd:3e:88:32:6c:
d0:3a:34:9c:3c:89:e8:9e:b4:f1:19:dc:26:45:3a:f3:f7:72:
0a:17:df:16:27:54:e4:28:a5:30:87:10:d2:b7:ab:be:70:be:
cb:3e:5e:2e:06:17:2e:7f:20:e5:cd:68:4e:1e:24:14:25:cb:
11:5b:6c:8c:75:4b:c1:51:c2:0d:90:54:15:e1:ba:89:5f:ab:
74:95:ae:35:84:d5:82:7b:b1:9a:da:16:0d:f8:3c:d6:d0:e1:
fe:69:d9:04
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiH6lGoM02nvap/crYRRVxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMzA2NThmMTZkMmQ4OGQzNDE2NDU5MmZjZDRkZTEzMTMx
ZjE2OTUwHhcNMjUwMTAxMTM0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NWYyMWYxZDIzODdkZDIwOWU1MWZhZTExNjdkNGJmZTFiYzUyNWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8CRLYJmi+NJG/GrFZYlSg5LjnaC
B8VF7pjkQxw/lNEin9qynLIzNPex63MjriXNq0us2Mu8MvrkrVu4eEa6kA9+h9KY
9kUsED6IaYSImpw/W3e4H535eU89iB06JqyJOZ0Z3zLA9DVZc2ILueuFdUafdwJr
PxeFXUpFibwINNQJSMohR0nM/s1cu/934HS0WI65sp9mSNxqxaxdVYyAGr/7nQUy
jqr0oRd2KF/HuqIK4yjdtR+a2BYUmw1TafwJS5Es7K+mTJzjgTkK4bM29kzZTQov
Om2e1FGKgFeIviQaaXgQJt18VECVVwfQImWyTIqx8NvzXNYU0OcGljLJcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFXyHx0jh90gnlH64RZ9S/4bxSW2MB8GA1UdIwQY
MBaAFPAwZY8W0tiNNBZFkvzU3hMTHxaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOERCbGp4YlMySTAwRmtXU19OVGVFeE1mRnBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi82NjkzZTMtODljYS00NGExLWE4YjYt
ODk0ODA1Mjg5Y2MwLzEvVmZJZkhTT0gzU0NlVWZyaEZuMUxfaHZGSmJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi82NjkzZTMtODljYS00NGExLWE4YjYtODk0ODA1Mjg5Y2Mw
LzEvOERCbGp4YlMySTAwRmtXU19OVGVFeE1mRnBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQ+eMA0G
CSqGSIb3DQEBCwUAA4IBAQA4lhjp7DHgYhoEEiS+oIq8d4RpatmsiNRmq5lqqF4z
T0hmuYiWSi+Rc8r3euRe3MvJ6QAYjSdKb1zpsW5P9iv8Wan4QBxF9aUSPBvANMud
JJIWJFh92UCL8vaAeTL4w+byj+PwX6kU3GFuV+ydrQg7oHTw4FzkHKMrbPPbmZ0x
M9r77tALAfZwLoIy2U9vRVCr9sK8MKfjcTFrW6G5zT6IMmzQOjScPInonrTxGdwm
RTrz93IKF98WJ1TkKKUwhxDSt6u+cL7LPl4uBhcufyDlzWhOHiQUJcsRW2yMdUvB
UcINkFQV4bqJX6t0la41hNWCe7Ga2hYN+DzW0OH+adkE
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:45 2025 by rpki-client